CIP-007: Cyber Security Measures (Update: v5 Rev.3 09/11/12)

  • M1. Evidence must include the documented processes that collectively include each of the applicable requirement parts in CIP-007-5 R1. - Ports and Services
  • M2. Evidence must include each of the applicable documented processes that collectively include each of the applicable requirement parts in CIP-007-5 R2. - Security Patch Management
  • M3. Evidence must include each of the documented processes that collectively include each of the applicable requirement parts in CIP-007-5 R3. - Malicious Code
  • M4. Evidence must include each of the documented processes that collectively include each of the applicable requirement parts in CIP-007-5 R4. - Security Event Monitoring
  • M5. Evidence must include each of the applicable documented processes that collectively include each of the applicable requirement parts in CIP-007-5. - System Access Controls